Terrance DeJesus cd02674402 [New Rule] Suspicious Email Access by First-Party Application via Microsoft Graph (#4704) ...

* new rule 'Suspicious Email Access by First-Party Application via Microsoft Graph'

* updated patch version

---------

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>

(cherry picked from commit 8f27c24528)

2025-05-10 00:53:46 +00:00

..

api_schemas

Prep main for 9.1 (#4555)

2025-03-26 15:08:47 +00:00

beats_schemas

Refresh ecs, beats, integration manifests & schemas (#4699)

2025-05-05 17:41:00 +00:00

ecs_schemas

Refresh ecs, beats, integration manifests & schemas (#4699)

2025-05-05 17:41:00 +00:00

endgame_schemas

Updated ECS mappings from keyword to wildcard (#2518)

2023-02-07 09:43:19 -05:00

endpoint_schemas

[FR] Add Support for Multi-Fields and Validation in Rules (#2882)

2023-06-28 20:35:33 -04:00

__init__.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

_config.yaml

Feature exclude tactic name (#4593)

2025-04-16 20:06:57 +00:00

attack-crosswalk.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

attack-technique-redirects.json

Refresh ecs, beats, integration manifests & schemas (#4699)

2025-05-05 17:41:00 +00:00

attack-v17.0.0.json.gz

Refresh ecs, beats, integration manifests & schemas (#4699)

2025-05-05 17:41:00 +00:00

commit-and-push.sh

Update commit-and-push.sh (#2640)

2023-03-09 17:31:19 -05:00

deprecated_rules.json

Lock versions for releases: 8.14,8.15,8.16,8.17,8.18,9.0 (#4601)

2025-04-08 13:00:35 +00:00

downloadable_updates.json

Lock versions for releases: 8.3,8.4,8.5,8.6,8.7,8.8,8.9,8.10,8.11,8.12 (#3431)

2024-02-06 14:48:33 -05:00

example_test_config.yaml

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

integration-manifests.json.gz

Refresh ecs, beats, integration manifests & schemas (#4699)

2025-05-05 17:41:00 +00:00

integration-schemas.json.gz

Refresh ecs, beats, integration manifests & schemas (#4699)

2025-05-05 17:41:00 +00:00

lock-multiple.sh

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

non-ecs-schema.json

[New Rule] Suspicious Email Access by First-Party Application via Microsoft Graph (#4704)

2025-05-10 00:53:46 +00:00

packages.yaml

Prep for Release 8.18 (#4288)

2024-12-09 18:25:13 +05:30

rule_template_typosquatting_domain.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

security-logo-color-64px.svg

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

stack-schema-map.yaml

Refresh ecs, beats, integration manifests & schemas (#4699)

2025-05-05 17:41:00 +00:00

test_cli.bash

Support toml lint for investigate transforms (#4066)

2024-09-11 20:45:36 +05:30

test_hunting_cli.bash

[Hunting] Re-factor Hunting Library Code (#4085)

2024-10-03 12:47:40 -04:00

test_remote_cli.bash

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_toml.json

Support toml lint for investigate transforms (#4066)

2024-09-11 20:45:36 +05:30

version.lock.json

Lock versions for releases: 8.14,8.15,8.16,8.17,8.18,9.0 (#4703)

2025-05-07 02:08:55 +00:00